Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File:                     v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier:          K1NElAbQxAPVCL6XuVwe3jfn7+sDyghYghp4uPlqzvY=
Subject key identifier:   99:9F:AE:27:B7:95:15:C5:5A:C9:4F:DD:AF:C7:29:2A:6F:0E:4B:82
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer:       /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial:       019D38D2FDC0A18A9A8D87B12080E596DF10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 09:00:44 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:44 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:44 +0000
Files and hashes:         1: axLujUagH_dCn6TXOtWPBDE3Szo.roa (hash: jt/V9NWMIChAooozTeAvM5YQ3gDwItihIdrwd9f6W0g=)
                          2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: v6GNYJFaJnHCaIvZIxeqNYyLj1Zvgn7wk9zKOyVfJps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:fd:c0:a1:8a:9a:8d:87:b1:20:80:e5:96:df:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
        Validity
            Not Before: Mar 29 09:00:44 2026 GMT
            Not After : Mar 30 09:00:44 2026 GMT
        Subject: CN=999fae27b79515c55ac94fddafc7292a6f0e4b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:1d:80:b1:bb:e2:0a:e9:7d:a7:f9:cb:7e:
                    7c:f2:dd:58:f9:ac:e9:8c:08:f2:09:f0:a5:d5:d6:
                    84:1c:c3:30:52:26:b8:9a:87:54:5a:39:8a:e6:03:
                    72:61:3e:9b:91:b7:34:0b:f8:e1:c2:3f:b1:8e:c0:
                    fa:ab:fc:e8:24:89:99:94:be:c8:ef:3d:52:09:61:
                    62:19:c3:10:9d:e7:40:cd:c3:9a:28:a4:ab:be:33:
                    e7:8f:40:0c:39:16:28:84:69:96:54:12:b2:fd:ba:
                    fd:28:2e:05:e1:e8:2f:6b:7b:5a:35:c8:b3:e3:f9:
                    47:e2:17:6f:40:da:2e:dd:bd:df:b9:74:25:39:a6:
                    1d:5f:d4:94:2a:76:fd:2a:38:f9:fe:ba:52:8d:ba:
                    48:b2:b7:73:a9:9a:1f:24:98:f6:ab:10:d2:70:b9:
                    f5:a4:1c:df:12:2f:31:d4:81:25:9c:7a:7c:a9:9e:
                    30:c1:28:1e:1a:87:30:b8:7d:11:35:f6:a0:de:ae:
                    2d:0b:5d:04:3b:78:22:d4:f4:57:d2:6f:3d:9e:3b:
                    41:f9:76:8d:f5:eb:40:f6:ee:73:08:6f:6f:0b:c0:
                    b2:02:d0:f7:91:e5:63:16:49:ef:f9:3b:a0:75:97:
                    2d:a7:f2:6f:16:43:af:3f:ce:a5:b7:1f:0f:71:4a:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:AE:27:B7:95:15:C5:5A:C9:4F:DD:AF:C7:29:2A:6F:0E:4B:82
            X509v3 Authority Key Identifier:
                keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:1f:85:fb:68:5c:7b:6f:b8:b1:88:97:d4:d4:01:d3:6c:
         58:a0:62:18:dc:bd:ab:88:f2:2d:5c:c3:71:df:87:6b:b7:e6:
         3e:7f:75:33:cb:60:af:10:2b:87:26:12:21:f5:ce:70:67:11:
         26:f2:72:a0:18:1b:1c:26:f5:40:a4:d8:ce:da:b3:f3:cd:ec:
         af:ae:9f:c9:18:ec:9a:e6:8a:d8:f6:af:fd:94:46:80:44:04:
         57:a2:88:a4:98:25:ea:55:d2:2e:03:28:3f:f5:3d:02:89:7b:
         59:ca:b7:d7:80:2e:e3:fc:35:29:75:8a:f6:fb:1f:72:eb:de:
         01:ab:0f:d5:fb:0c:41:ef:3f:1f:e3:66:8f:5a:f6:dc:cb:bb:
         8d:1d:ad:4f:74:c4:23:1a:40:79:17:7d:f6:60:d0:f6:8e:7a:
         84:bc:16:a0:2f:3b:60:a4:35:8e:4a:d0:02:7b:f1:71:f5:36:
         07:1c:b4:cd:45:43:10:b7:42:87:d9:7b:2d:e8:6a:ac:78:bb:
         07:fe:0a:4d:dc:05:25:c6:76:42:fa:c5:2b:58:b9:99:fb:fa:
         a4:50:02:d2:75:5f:4c:e2:7c:68:53:52:77:3c:54:69:06:0d:
         18:ba:39:58:4c:f1:20:4a:0b:e5:a8:c0:5e:6f:73:7c:67:cf:
         5e:0d:0b:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040v3AoYqajYexIIDllt8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjU0OGQ4NTcyNTEwNDUyN2YzYmU0Nzk3NmI2NzQ3Mzlh
ZTJmMTMwHhcNMjYwMzI5MDkwMDQ0WhcNMjYwMzMwMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg5OTlmYWUyN2I3OTUxNWM1NWFjOTRmZGRhZmM3MjkyYTZmMGU0YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZsdgLG74grpfaf5y3588t1Y+azp
jAjyCfCl1daEHMMwUia4modUWjmK5gNyYT6bkbc0C/jhwj+xjsD6q/zoJImZlL7I
7z1SCWFiGcMQnedAzcOaKKSrvjPnj0AMORYohGmWVBKy/br9KC4F4egva3taNciz
4/lH4hdvQNou3b3fuXQlOaYdX9SUKnb9Kjj5/rpSjbpIsrdzqZofJJj2qxDScLn1
pBzfEi8x1IElnHp8qZ4wwSgeGocwuH0RNfag3q4tC10EO3gi1PRX0m89njtB+XaN
9etA9u5zCG9vC8CyAtD3keVjFknv+TugdZctp/JvFkOvP86ltx8PcUp4HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmfrie3lRXFWslP3a/HKSpvDkuCMB8GA1UdIwQY
MBaAFL+1SNhXJRBFJ/O+R5drZ0c5ri8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzIt
NzFjNDZjMTk5NjM2LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzItNzFjNDZjMTk5NjM2
LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7Ufhfto
XHtvuLGIl9TUAdNsWKBiGNy9q4jyLVzDcd+Ha7fmPn91M8tgrxArhyYSIfXOcGcR
JvJyoBgbHCb1QKTYztqz883sr66fyRjsmuaK2Pav/ZRGgEQEV6KIpJgl6lXSLgMo
P/U9Aol7Wcq314Au4/w1KXWK9vsfcuveAasP1fsMQe8/H+Nmj1r23Mu7jR2tT3TE
IxpAeRd99mDQ9o56hLwWoC87YKQ1jkrQAnvxcfU2Bxy0zUVDELdCh9l7LehqrHi7
B/4KTdwFJcZ2QvrFK1i5mfv6pFAC0nVfTOJ8aFNSdzxUaQYNGLo5WEzxIEoL5ajA
Xm9zfGfPXg0LNQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:06 2026 by rpki-client